
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
File: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft (raw, json)
Hash identifier: NUi5lJQuTtEoUqPyPjFegkOFicuToc/ei9mi2Ul/+ro=
Subject key identifier: 74:EB:53:3E:2E:46:9B:9B:06:F7:E2:45:5A:C9:42:53:8A:BE:21:30
Authority key identifier: 70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9
Certificate issuer: /CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
Certificate serial: 0CF743D0695C41A7ABAC86F0E553691E8C45F2CA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 23:14:53 +0000
Manifest this update: Wed 23 Sep 2026 23:09:53 +0000
Manifest next update: Fri 25 Sep 2026 01:50:53 +0000
Files and hashes: 1: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: B2JBhxZBgB0va+fccB3dL51mK3TG1i5CCqVPp24i9Qw=)
2: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: 4bKBlVxqedWSCh5v8weNHekAQ9GKb4xy7LR81Mjy5FE=)
3: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl (hash: E2ob5YammeUbcgxzWjfolaQHx8OO7BvT4Jh144kcP9U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl
rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 01:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f7:43:d0:69:5c:41:a7:ab:ac:86:f0:e5:53:69:1e:8c:45:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
Validity
Not Before: Sep 23 23:09:53 2026 GMT
Not After : Sep 25 01:50:53 2026 GMT
Subject: CN=74EB533E2E469B9B06F7E2455AC942538ABE2130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:61:ab:72:06:7d:9a:a7:71:50:23:14:cd:26:
0b:18:d6:5b:53:df:ae:83:b5:82:04:c0:bf:34:49:
cb:4a:5c:b7:1e:d0:cb:cf:f8:25:91:17:71:6e:a2:
9e:d5:cd:8b:39:1d:20:33:d2:fd:6a:dc:55:3d:2b:
74:ba:2e:72:39:a5:39:96:c1:cb:0e:fd:34:87:a0:
4c:17:98:c2:ea:72:26:b3:77:5a:d6:43:dd:1d:2a:
83:13:7c:92:fa:d2:9c:08:34:50:f3:8c:40:80:aa:
cd:c1:6f:33:0b:79:d6:43:72:cd:48:79:fc:75:8c:
f8:30:f0:98:d8:77:d1:c9:c7:9c:06:55:83:22:40:
ff:ec:17:a0:20:22:6a:c7:83:d7:b2:18:65:ae:aa:
5b:59:92:a8:2e:7f:5f:7f:9b:fa:f0:61:e3:bd:c0:
ed:3e:09:b2:e2:5a:b9:2e:d1:9b:54:43:7a:8b:af:
37:06:6b:5c:85:bd:61:fd:61:a9:13:d1:23:e1:15:
42:fe:97:a9:5a:76:2c:a6:ab:c7:f9:e5:f5:6a:a6:
41:77:74:7b:b2:31:33:0e:db:da:f2:f2:92:ac:6f:
b6:f7:b3:e8:26:7f:7c:a9:31:80:43:45:36:7f:32:
ee:80:55:2d:d6:4f:f1:92:c7:8d:77:c5:37:d9:cf:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EB:53:3E:2E:46:9B:9B:06:F7:E2:45:5A:C9:42:53:8A:BE:21:30
X509v3 Authority Key Identifier:
keyid:70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d7:b1:25:d4:0f:be:60:7a:af:41:58:84:01:99:ef:c5:0b:
4a:10:10:51:50:49:cb:49:8a:57:15:a2:ca:a9:ec:cf:c2:6b:
f9:90:f6:4a:06:ab:77:d9:f2:46:c0:25:31:96:8b:7b:3a:9c:
b3:63:12:35:7f:93:c1:54:7e:2c:6c:db:a8:89:7d:10:67:80:
c9:8d:0b:16:df:88:09:91:ba:ba:dd:f7:82:ef:bd:6c:bb:c6:
8a:d1:0f:0f:97:92:c1:e6:e0:67:82:aa:91:dc:f7:74:a8:7e:
f7:8a:cb:f5:dd:d8:9a:a5:28:d2:e4:2b:08:5f:6d:9a:57:c6:
e8:27:02:e9:3e:63:a8:cd:ed:16:8e:29:ed:2a:88:18:9f:03:
7f:52:49:9e:0c:a8:4d:67:16:08:63:57:99:ca:36:87:73:b0:
fd:82:ca:fe:ed:2b:b0:ab:7e:c1:93:a4:73:97:86:69:6f:d0:
ab:dc:07:d5:16:97:ee:23:15:59:ac:75:13:64:a7:4f:31:1a:
7c:3e:2f:31:8c:8b:3d:bb:3e:28:dd:59:77:ce:c4:9b:af:b2:
b5:97:fd:f0:cb:ba:0e:a0:fa:db:49:b3:78:72:74:35:d6:81:
b3:57:51:67:b4:2e:2b:66:c7:ff:bf:93:ca:a1:a0:94:a3:cd:
0f:2f:bc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:43:12 2026 by rpki-client